CVE-2025-11399 SourceCodester Hotel and Lodge Management System save_room.php sql injection

A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /pages/saveroom.php. The manipulation of the argument floorno leads to sql injection. Remote exploitation of the attack is possible. The exploit has bee...

CVE-2025-11399

SourceCodester Hotel and Lodge Management System 1.0 contains a SQL injection vulnerability in the /pages/save_room.php handler caused by unsafely manipulating the floorno parameter. The issue has been publicly disclosed and remotely exploitable, with proof-of-concept activity noted in multiple s...

SourceCodester Hotel and Lodge Management System 安全漏洞

SourceCodester Hotel and Lodge Management System is a SourceCodester open source hotel and lodge management system. A security vulnerability exists in SourceCodester Hotel and Lodge Management System version 1.0, which stems from an incorrect manipulation of the parameter floorno in the file...